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CP/M Dynamic Debugging Tool (DDT) 


User's Guide 


I. Introduction. 


The DDT program allows dynamic interactive testing and debugging of 
programs generated in the CP/M environment. The debugger is initiated by 
typing one of the following commands at the CP/M Console Command level 


DDT 
DDT filename „НЕХ 
DDI filename.COM 


where "filename" is the name of the program to be loaded and tested. In both 
cases, the DDT program is brought into main memory in the place of the Console 
Command Processor (refer to the CP/M Interface Guide for standard memory 
organization), and thus resides directly below the Basic Disk Operating System 
portion of CP/M. The BDOS starting address, which is located in the address 
field of the JMP instruction at location 5H, is altered to reflect the reduced 
Transient Program Area size. 


The second and third forms of the DDI command shown above perform the same 
actions as the first, except there is a subsequent automatic load of the 
specified HEX or COM file. The action is identical to the sequence of 
commands 


DDT 
Ifilename.HEX or Ifilename «СОМ 
R 


where the I and R commands set up and read the specified program to test (see 
the explanation of the I and R commands below for exact details). 


Upon initiation, DDT prints a sign-on message in the format 
nnK DDI-s VER m.m 


where nn is the memory size (which must match the CP/M system being used), S 
is the hardware system which is assumed, corresponding to the codes 


- Digital Research standard version 
- MDS version 

IMSAI standard version 

- Omron systems 

- Digital Systems standard version 


тона 
| 


and mm is the revision number. 


Following the sign on message, DDT prompts the operator with the character 
"-" and waits for input commands from the console. The operator can type any 
of several single character commands, terminated by a carriage return to 
execute the command. Each line of input can be line-edited using the standard 
CP/M controls 


rubout remove the last character typed 
ctl-U remove the entire line, ready for re-typing 
ctl-C system reboot 


Any command can be up to 32 characters in length (an automatic carriage return 
is inserted as the 33rd character), where the first character determines the 
command type 


enter assembly lanquage mnemonics with operands 
display memory in hexadecimal and ASCII 

fill memory with constant data 

begin execution with optional breakpoints 

set up a standard input file control block 

list memory using assembler mnemonics 

move a memory segment from source to destination 
read program for subsequent testing 

substitute memory values 

trace program execution 

untraced program monitoring 

examine and optionally alter the CPU state 


хсеноскгняотоо> 


The command character, іп some cases, is followed by zero, опе, two, or three 
hexadecimal values which are separated by commas or single blank characters. 
All DDT numeric output is in hexadecimal form. In all cases, the commands аге 
not executed until the carriage return is typed at the end of the command. 


At any point in the debug run, the operator can stop execution of DDT 
using either а ctl-C or Сй (jmp to location 0000H), and save the current 
memory image using a SAVE command of the form 


SAVE n filename „СОМ 


where n is the number of pages (256 byte blocks) to be saved on disk. The 
number of blocks can be determined by taking the high order byte of the top 
load address and converting this number to decimal. For example, if the 
highest address in the Transient Program Area is 1234H then the number of 
pages is 12H, or 18 in decimal. Thus the operator could type a ctl-C during 
the debug run, returning to the Console Processor level, followed by 


SAVE 18 X.COM 
The memory image is saved as X.COM on the diskette, and can be directly 


executed by simply typing the name Х. If further testing is required, the 
memory image can be recalled by typing 


DDI X.COM 


which reloads previously saved program from loaction 10@H through page 18 
(12FFA). The machine state is not a part of the COM file, and thus the 
program must be restarted from the beginning in order to properly test it. 


II. DDI COMMANDS. 


The individual commands are given below in some detail. In each case, the 
operator must wait for the prompt character (-) before entering the command. 
ТЕ control is passed to a program under test, апа the program has not reached 
a breakpoint, control can be returned to DDT by executing a RST 7 from the 
front panel (note that the rubout key should be used instead if the program is 
executing a T or U command). In the explanation of each command, the command 
letter is shown in some cases with numbers separated by commas, where the 
numbers are represented by lower case letters. These numbers are always 
assumed to be in a hexadecimal radix, and from one to four digits in length 
(longer numbers will be automatically truncated on the right). 


Many of the commands operate upon a "CPU state" which corresponds to the 
program under test. The CPU state holds the registers of the program being 
debugged, and initially contains zeroes for all registers and flags except for 
` the program counter (P) and stack pointer (S), which default to 1008. The 
program counter is subsequently set to the starting address given in the last 
record of a HEX file if a file of this form is loaded (see the I and R 


commands) „ 


1. The A (Assemble) Command.  DDT allows inline assembly language to be 
inserted into the current memory image using the A command which takes the 


form 
As 


where s is the hexadecimal starting address for the inline assembly. DDT 
prompts the console with the address of the next instruction to fill, and 
reads the console, looking for assembly language mnemonics (see the Intel 8086 
Assembly Language Reference Card for a list of mnemonics), followed by 
register references and operands in absolute hexadecimal form. Each sucessive 
load address is printed before reading the console. The A command terminates 
when the first empty line is input from the console. 


Upon canpletion of assembly language input, the operator can review the 
memory segment using the DDT disassembler (see the L command). 


Note that the assembler/disassembler portion of DDT can be overlayed by 
the transient program being tested, in which case the DDI program responds 
with an error condition when the A and L commands are used (refer to Section 


IV). 


2. The D (Display) Command. The D command allows the operator to view 
the contents of memory in hexadecimal and ASCII formats. The forms are 


D 
Ds 


In the first case, memory is displayed from the current display address 
(initially 100H), and continues for 16 display lines. Each display line takes 
the form shown below 


aaaa bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb сссссссссссссссс 


where aaaa is the display address in hexadecimal, and bb represents data 
present in memory starting at aaaa. The ASCII characters starting at aaaa are 
given to the right (represented by the sequence of c’s), where non-graphic 
characters are printed as a period (.) symbol. Note that both upper and lower 
case alphabetics are displayed, and thus will appear as upper case symbols on 
a console device that supports only upper case. Each display line gives the 
values of 16 bytes of data, except that the first line displayed is truncated 
so that the next line begins at an address which is a multiple of 16. 


The second form of the D command shown above is similar to the first, 
except that the display address is first set to address 5. The third form 
causes the display to continue from address s through address f. In all 
cases, the display address is set to the first address not displayed in this 
command, so that a continuing display can be accomplished by issuing 
successive D commands with no explicit addresses, 


Excessively long displays can be aborted by pushing the rubout key. 


3. The F (Fill) Command. The F command takes the form 
Fs,£,c 


where s is the starting address, f is the final address, and c is a 
hexadecimal byte constant. The effect is as follows:  DDT stores the constant 
c at address s, increments the value of s and tests against f. If s exceeds f 
then the operation terminates, otherwise the operation is repeated. Thus, the 
fill cammand can be used to set a memory block to a specific constant value. 


4. The С (Go) Command. Program execution is started using the С comand, 
with up to two optional breakpoint addresses. The С command takes one ot the 
forms 

G 
Gs 
Gs,b 


The first form starts execution of the program under test at the current value 
of the program counter in the current machine state, with no breakpoints set 
(the only way to regain control in DDI is through a RST 7 execution). The 
current program counter can be viewed by typing an X or XP command. The 
second form is similar to the first except that the program counter in the 
current machine state is set to address s before execution begins, The third 
form is the same as the second, except that program execution stops when 
address b is encountered (b must be in the area of the program under test). 
The instruction at location b is not executed when the breakpoint is 
encountered. The fourth form is identical to the third, except that two 
breakpoints are specified, one at b and the other at c. Encountering either 
breakpoint causes execution to stop, and both breakpoints are subsecuently 
cleared. Ihe last two forms take the program counter from the current machine 
state, and set one and two breakpoints, respectively. 


Execution continues from the starting address in real-time to the next 
breakpoint. That is, there is no intervention between the starting address 
and the break address by DDT. Thus, if the program under test does not reach 
а breakpoint, control cannot return to DDI without executing a RST 7 
instruction. Upon encountering a breakpoint, DDT stops execution and types 


*d 


where d is the stop address. The machine state can be examined at this point 
using the X (Examine) command. The operator must specify breakpoints which 
differ from the program counter address at the beginning of the G command. 
Thus, if the current program counter is 1234H, then the commands 


G,1234 
and 
6400 , 400 


both produce an immediate breakpoint, without executing any instructions 
whatsoever. 


5. The I (Input) Command. The I command allows the operator to insert a 
file name into the default file control block at 5CH (the file control block 
created by CP/M for transient programs is placed at this location; see the 
CP/M Interface Guide). The default FCB can be used by the program under test 
as if it had been passed by the CP/M Console Processor. Note that this file 
name is also used by DDT for reading additional HEX and COM files. The form 
of the I command is 


Ifilename 
or 


Ifilename.filetype 


If the second form is used, and the filetype is either HEX or COM, then 
subsequent R commands can be used to read the pure binary or hex format 
machine code (see the R command for further details). 


6. The L (List) Command. The L command is used to list assembly lanquage 
mnemonics in a particular program region. The forms are 


L 
Ls 
Ls,f 


The first command lists twelve lines of disassembled machine code from the 
current list address. The second form sets the list adaress to s, and then 
lists twelve lines of code. The last form lists disassembled code from s 
through address f. Іп all three cases, the list address is set to the next 
unlisted location in preparation for a subsequent L command, Upon 
encountering an execution breakpoint, the list address is set to the current 
value of the program counter (see the G and T commands). Again, long typeouts 
can be aborted using the rubout key during the list process, 


7. The M (Move) Command. The M command allows block movement of proqram 
or data areas from one location to another in memory. The form is 


where s is the start address of the move, f is the final address of the move, 
and d is the destination address. Data is first moved from s to d, and both 
addresses are incremented. If s exceeds f then the move operation stops, 
otherwise the move operation is repeated. 


8. The R (Read) Command. The R command is used in conjunction with the I 
command to read COM and HEX files from the diskette into the transient program 
area in preparation for the debug run. The forms are 


R 
Rb 


where b is an optional bias address which is added to each program or data 
address as it is loaded. The load operation must not overwrite any of the 
system parameters from (00H through @FFH (i.e., the first page of memory). If 
b is amitted, then b-0000 is assumed. The В command requires a previous I 
command, specifying the name of a HEX or COM file. The load address for each: 
record is obtained from each individual HEX record, while an assumed load 
address of 100H is taken for COM files. Note that any number of R commands 
can be issued following the I command to re-read the program under test, 


assuming the tested program does not destroy the default area at 5СН. 
Further, any file specified with the filetype "СОМ" is assumed to contain 
machine code in pure binary form (created with the LOAD or SAVE command), and 
all others are assumed to contain machine code in Intel hex format (produced, 
for example, with the ASM command). 


Recall that the command 
DDI filename.filetype 
which initiates the DDT program is equivalent to the commands 


DDI 
-Ifilename.filetype 
-R 


Whenever the R command is issued, DDT responds with either the error indicator 
"2" (file cannot be opened, or a checksum error occurred in a HEX file), or 
with a load message taking the form 


NEXT PC 
nnnn pppp 


where nnnn is the next address following the loaded program, and pppp is the 
assumed program counter (100H for COM files, or taken from the last record if 
a HEX file is specified). 


9, The S (Set) Command. The S command allows memory locations to be 
examined and optionally altered. The form of the command is 


Ss 


where s is the hexadecimal starting address for examination and alteration of 
memory.  DDT responds with a numeric prompt, giving the memory location, along 
with the data currently held in the memory location. If the operator types a 
carriage return, then the data is not altered. If a byte value is typed, then 
the value is stored at the prompted address. In either case, DDT continues to 
prompt with successive addresses and values until either a period (.) is typed 
by the operator, or an invalid input value is detected. 


10. The T (Trace) Command. The T command allows selective tracing of 
program execution for 1 to 65535 program steps. The forms are 


Ж 
Тп 


In the first case, the CPU state is displayed, and the next program step is 
executed. The program terminates immediately, with the termination address 


displayed as 
*hhhh 


where hhhh is the next address to execute. The display address (used in the D 
command) is set to the value of H and L, and the list address (used in the L 
command) is set to hhhh, The CPU state at program termination can then be 
examined using the X command. 


The second form of the T command is similar to the first, except that 
execution is traced for n steps (n is a hexadecimal value) before a program 
breakpoint is occurs. A breakpoint can be forced in the trace mode by typing 
a rubout character. The CPU state is displayed before each program step is 
taken in trace mode. The format of the display is the same as described in 
the X command. 


Note that program tracing is discontinued at the interface to CP/M, and 
resumes after return from CP/M to the program under test. Thus, CP/M 
functions which access I/O devices, such as the diskette drive, run in 
real-time, avoiding I/O timing problems. Programs running in trace mode 
execute approximately 500 times slower than real time since DDI gets control 
after each user instruction is executed. Interrupt processing routines can be 
traced, but it must be noted that commands which use the breakpoint facility 
(G, T, and U) accomplish the break using a RST 7 instruction, which means that 
the tested program cannot use this interrupt location. Further, the trace 
mode always runs the tested program with interrupts enabled, which may cause 
problems if asynchronous interrupts are received during tracing. 


Note also that the operator should use the rubout key to get control back 
to DDI during trace, rather than executing a RST 7, in order to ensure that 
the trace for the current instruction is completed before interruption. 


11, The U (Untrace) Command, The U command is identical to the T command 
except that intermediate program steps are not displayed. The untrace mode 
allows from 1 to 65535 (0FFFFH) steps to be executed in monitored mode, and is 
used principally to retain control of an executing program while it reaches 
Steady state conditions. All conditions of the T command apply to the U 
command. 


12. The X (Examine) Command. The X command allows selective display and 
alteration of the current CPU state for the program under test. The forms are 


X 
Xr 


where r is one of the 8080 CPU registers 


C Carry Flag (0/1) 
Z Zero Flag (0/1) 


M Minus Flag (0/1) 

E Even Parity Flag (0/1) 

І  Interdigit Carry (0/1) 

А Accumulator (0--РЕ) 

В BC register pair (Ü-FFFF) 
D DE register pair (Ü-FFFF) 
H HL register pair (й-ҒЕҒЕ) 
S Stack Pointer (Ü-FFFF) 
P Program Counter (Q-FFFF) 


In the first case, the CPU register state is displayed in the format 
CfZfMfEfIf A-bb B=dddd D=dddd H=dddd S=dddd P=dddd inst 


where f is a @ or 1 flag value, bb is a byte value, and dddd is a double byte 
quantity corresponding to the register pair. The "inst" field contains the 
disassembled instruction which occurs at the location addressed by the CPU 
state's program counter. 


The second form allows display and optional alteration of register values, 
where г is one of the registers given above (C, 2, M, E, I, А, В, D, В, 5, or 
P). In each case, the flag or register value is first displayed at the 
console. The DDT program then accepts input from the console. If a carriage 
return is typed, then the flag or register value is not altered. If a value 
in the proper range is typed, then the flag or register value is altered. 
Note that BC, DE, and HL are displayed as register pairs. Thus, the operator 
types the entire register pair when B, C, or the BC pair is altered. 


III. IMPLEMENTATION NOTES. 


The organization of DDT allows certain non-essential portions to be 
overlayed in order to gain a larger transient program area for debugging large 
programs, The DDT program consists of two parts: the DDT nucleus and the 
assembler/disassembler module. The DDT nucleus is loaded over the Console 
Command Processor, and, although loaded with the DDT nucleus, the 
assembler/disassembler is overlayable unless used to assemble or disassemble. 


In particular, the BDOS address at location 6H (address field of the JMP 
instruction at location 5H) is modified by DDT to address the base location of 
the DDI nucleus which, in turn, contains a JMP instruction to the BDOS. Thus, 
programs which use this address field to size memory see the logical end of 
memory at the base of the DDT nucleus rather than the base of the BDOS. 


The assembler/disassembler module resides directly below the DDT nucleus 
in the transient program area. If the A, L, T, or X commands are used during 
the debugging process then the DDT program again alters the address field at 
6H to include this module, thus further reducing the logical end of memory. 
If a program loads beyond the beginning of the assembler/disassembler module, 
the A and L commands are lost (their use produces a "?" in response), and the 


trace and display (T and X) commands list the "inst" field of the display іп 
hexadecimal, rather than as a decoded instruction. 


IV. AN EXAMPLE. 


The following example shows an edit, assemble, and debug for a simple 
program which reads a set of data values and determines the largest value in 
the set. The largest value is taken from the vector, and stored into "LARGE" 
at the termination of the program 


ED ССАН. ASM 

el ы 

| Job mod "m" дай echo 
1 


#1 
Ptr ORG ме ван tutte DF TRANSIENT AREA, 
Wed B.LEH — ;LENGTH OF VECTOR TO SCAN, 
MVI с. ;LARGER_RST VALUE 50 FAR, 
OOF POOL LXI He МЕСТ ¡BAS ۴ 
ГОФЕА маў "TIT ¡GET VALUE, 
SUE [3 ¡LARGER VALUE IN C7, 
одной «чс NFOUHD ¿JUMP IF LARGER VALUE NOT FOUND 
ig NEW LARGEST VALUE, STORE IT TO C, ы 
Ho суй, 
HFOUND: ‘INK H ¿TO NEXT ELEMENT 
ICR в :МОВЕ TO SCAN? , й Create Source | 
| JNZ 00Р ¡FOR ANOTHER, Pragrawa. - underlined 
de 
i END OF SCAN. STORE С, Charackrs typed 
ШЕ AC ¡GET LARGEST VALUE | 
STA CARGE | з ky Programmen. 
КОН, 2 " 
m A ;REBOOT, "y" vewesects ситец 
Hi TEST DATA | redura.. 
VECT, DB 2.0.4, 3, 5, 6:1. 5) 
CEN EQU F-VECT LENGTH, 
LARGE; DS i ¡LARGEST VALUE ON EXIT 
N END) 
квар 
? ore 100H START OF TRANSIENT AREA 
MYI B. LEN LENGTH OF VECTOR TO SCAN 
МУ1 с, 8 ;LARGEST VALUE SO FAR 
LXI Н, УЕСТ ВАЗЕ OF VECTOR 
LOOP, MOY à. М iGET VALUE 
SUB C ¡LARGER VALUE IN C? 
UNC > — NFOUND ¿JUMP IF LARGER VALUE NOT FOUND 
NEW LARGEST VALUE, STORE IT TO C 
MOY C/A | 
NFOUND. INK H ¡TO NEXT ELEMENT 
DCR B ¡MORE TO SCAN? 
JNZ LOOP ¿FOR ANOTHER 


10 


END OF SCAN. STORE С 


МОУ А, С ¡GET LARGEST VALUE 
STA LARGE | 
ЧМР 0 ; REBOOT 

i TEST DATA 

VECT: DB 2.0,4, 3, 5, 6,1,5 

(ЕМ EQU $-VECT ¡LENGTH 

LARGE: DS 1 iLARGEST VALUE ON EXIT 
END 


"tJ de End f Edd 


ASM SCAN 

E 2 Shark Assewbler 
СРУМ ASSEMBLER - VER 1.0 
8122 

GOZH USE FACTOR 


END OF ASSEMBLY Assembly Complete - Lock at Program Ет 


ТҮРЕ СЯН. РАН, 


Code Шек) . Source Regram 
01604 Machme Code ORG 1098H ;START OF TRANSIENT AREA 
0100 0608 MY I В, LEN ¿LENGTH OF VECTOR TO SCAN 
0102 ВЕВ@ MYI с, 0 LARGEST VALUE SO FAR 
0104 211901 LKI Н, МЕСТ ¿BASE OF VECTOR 
0107 7E LOOP: MOY A, М ;GET VALUE 
0188 91 SUB C ;LARGER VALUE IN C? 
0109 D20281 JNC NFOUND ¿JUMP IF LARGER VALUE NOT FOUND 
; NEW LARGEST VALUE, STORE IT TOC 
010С 4F MOV CA 
0102 23 NFOUND: INX H :Т0 NEXT ELEMENT 
018Е 05 DER B ;MORE TO SCAN? 
Q10F C20701 JNZ LOOP ;FOR ANOTHER 
; END OF SCAN, STORE C 
0112 79 MOY А, С ;GET LARGEST VALUE 
9113 322101 STA LARGE 
9116 534 (99 JMP e. ;REBOOT 
Cedo le "T j 
truncated ; TEST DATA 
0119 8200040305УЕСТ. DB 2, @, 4, 3,5, 6, 1, 5 
0008 = < LEN EQU $-VECT ¡LENGTH 
8121 Valea LARGE: DS 1 ;LARGEST VALUE ON EXIT 
0122 quake END | 


HIIR INR 


ВИТ SCAN. НЕХ ) Start Debumer (нд hex Sam machine Code 


ik ПИТ VER 1.0 


HEYT PC 

2321, PAGO ! ` 

“x [ast load addiess +! ject wshuchion 
2 È ее 


VOLOMAEGIO 4-88 B=40006 D-80080 H=G008 228180 Р=йййй OUT ТЕ Ceo 


=, \ Өомыё vegedoro ое debug run 


Р=ааав 100 Change Peto (00 


"E, Lose at vesistrs again pre changed. 
СӘСӨМӨЕЙІЙ йейй Вайййо Пей00й0 Н-йййй $=й1йй PsülCca MYI в, #8”) 
-Li1&a я 
—— ЖЕТ, 
Hild MYI BAB -to беде at Pe=\00 


8180 MYI ChQ 
8104 LXI Н. 0143 
MIF" MOY ALM 


8108 SUB C 
8199 JNE B101 Disaecembled Machine 
iat MOY С.а 

AID INK H Code at (00H . 
HIE DICR E (See Sauce Licking 
зів JNZ 0187 2 Compan is on) 


#112 MOV A.C 


8113 STA 0121 
8116 MP Bape 
8119 STAX B 
RILA NOP 

E A (е move | 
#112 INK B madame code 
Hill DER B 
HILE MVI в, 01 (uate thal Program 
8120 DCR E еміс at location 110 


віза Let 102290) with a qtu? to 000) | | 
“alie ewer mline assembly mode Чо change The TMP $ 0000 into a RST 7, which 

á vull Cause “Не. progam under est to velum do DDT мын 
AS ever executed, 


0117; langle carnage velurn stops assemble mode) ‘ 
-1113, Lat Cade at 184 do check Hal 511 wos propery inserted 


B1 STA візі m Place ch IMP 


alls 
#116 RST 87 


#116 RST 7 
—— 


4117 МОР 


8118 NOP 
8119 STAX B 
Hila NOP 


#118 INR В 
B11C INK В 


х. ык al кав 


928МйЕ0Ій A=B В-080й0й0 р=#000 Н=йййй S=Q100 Р=010й MVI 


Ly Bude адот Фи onc skp. МА CRU Әдіс; before ) ови 


820МйЕ010 азай Вайдай П-й000 Н=йййй S=0100 Р= #106 MVI 


=T . . 
79 “Tae one 560 asain (note OBU in ß) 
da гамвеета A=00 B=0900 D= 8000 H=@008 5-010й0 


Түсе again ( (енін C « cleared) 


ж UMEEGIA A=@G В-й800 П-8000 H=9808 S=0140 


"I, Trace thee skes 


COZGMBE@GIO A=60 E=48p4 D=800G H=G119 Зх018а 
COZOMAEGIO A=02 B-8880 D=09000 H-0119 S=0100 
= A=62 інн рейбда H=0119 S=e@1aa 
- 11 


Р= 0102 


P=@104 


Р«бій? 
P=@108 
P:a109 


МУ1 


LXI 


МОУ 
SUB 
JNE 


2,08% 


В. иЗжа 112 


дото. breakpont J 


С, @бжи 104 


H.8119«8187 


А, М 
C 
GIQDKOLOD 


Me wen Program c 
6124165/11 00 22 21 00 82 ?Е ЕВ ?? 13 23 O 


віза C2 27 01 СЗ 03 23 00 00 00 ов ва ва AG 
йа ва ве 00 00 вв BO 00 00 00 GA во ва ва 
8150 ae во ве ов вв BG BB 96 00 ов ве ao ав 
HIEG ва 00 OG 20 өв ве ве 00 ов OG 00 ва AA 
8178 00 00 ве 00 өв HO өө Ba ов 08 00 ue 4G 
isa 80 ве ве ве өв Be 00 ca ва 00 AG GO йй 
0190 ва ай 00 08 98 DO ве 00 BB da da aa AA 
віва 64 00 00 00 90 00 OO 00 08 OB BH na 88 
61684 ва 00 00 20 OO pa Ba 00 ов ов BO йй ва 
піса ва ao 00 00 ов BO OO 00 00 00 ве QG ва 


-х 
=} Current CPU state 
CAZAMAEOII A=92 B=48BA 0=0 000 H=ali9 32016080 


Trace 4 “ле From бше CPL Stade,‏ ر 


CAZEMBE@II A=02 B=8806 D-68000 H=@119 5=0100 
COZEAMBEGII A=82 Вха888 D-80900 Н=01 ій 5201880 
COZAMBEGII A=02 B=8700 D-80080 H=011A S=0106 
COZOMBOEGBII A=02 B-8700 D-86068 H=011A 5-0106 
CEZAMBEGII A=60 В-08700 D-80800 H=G11A S=G108@ 


ES Trace ud m wlenmediade stades 


С@21МВЕ111 A=00 В-0700 D-8000 Н-0118 S=0100 
“E, 000 State at ud US) 


COZUMBELII A=84 B=8608 D-8000 H=@11B S=0100 


ea do Be.’ | 

вв ûû йй 

ов 00 ва "TP 
98 ве da uc Acc whl n'e” 
ав 00 ве 

ва 96 Ba зерно. 
08 98 ва wee 

08 дй ве боп 

га en pa 

ов ав BO 

Р=е!@ INE H 

P=@1@D ІМК H 

P=@10E DCR В Дм 
P=@1GF JNZ 0187 Breakpoint 
P=0107 MOV ALM 

P:8188 SUB C*8189 
Ps8189 JNE  016D*0188 
P-8188 SUB C 


Es Lun Program Sem cumat PC until Combletión Cie real uve) 
vane lweakeowt ot ЦЕНУ caused by execuhna RST 7 in ynaclune Code 
"У Pusuk at ed f Prog van 


КӨХІШЕЕІ11 Asti B=4006 Пайййй H=6121 2201898 F:z8116 RAT ay 
ig будте and change Dusan Counter 


P=511€ 100 
беу 


“hy | 
¿421M6E111 ASSO Вейййо П-8000 H=0121 Ssülü6 ян MYI 


5, Tae 10 бадана ) eps і дф dn = 


CüZINGEIII Asta E = (i H=0121 Nada ا‎ 
CÓZIMBEIII й aie ps alaz MYI 
CaziMBEI1II йейй ais Реб1й4 LXI 
CEZIMBEITI A lan Peblar M0» 
COZINGELIL 840: alja Pe@iag SUE 
CHLEAMGE@IL A 
CazaMHaEari A= 
CHOZGMHEG@T1 A À 
COZOMEEGII я=й2 8-07й0 D=4604 H=olin 
COZOMBEGII А=@2 B-B87BG ребайй H=G11A 
^CazaMaEGII ñ=00 Вейтий D=@G0G H=a11A 
CO2IMREIII A=@6 B=G700 D=hGeG H=@11A 

A 

B 

B 

B 


gina Рей1р39 INC 
Giga Psilai INS 
81040 P=010E DCR В 
0140 P=Q10F JNZ 0147? 
0160 Pewia7 MOV ALM 
gina Рей1й8 SUB С 

6140 Рей1й9 JNE atan 
0108 Ре018 1 INK H 

01860 Рей 10E DER В 

01490 P=Q14F 4М261087 
азия P=a147Y MOV а,йжйіав 


COZIMAELTI A=00 Вей7й0 D-08008 H=011 
COZIMOEITI Asaa Вайува рейййй H=011 
CazaMgEITI я= 60 B-ü600 D-aaam Н=@]1Б 
CEZEaMBEITI A=@@ B=Q600 П-йһй000 H=Q115 


Om Om CO CÓ аа a буз ca сб ON 


- 4103 і un 
0 Tuer а lut рил" wo mens have woed the 
#199 JE 160 ће machine Code 

—— AD Chau th (м А мір C since Are. 
Bic) dix do Te ы ae ok not executed, 
-58, tp DOT Sotak a ven of it appears that the THC should 


the Patched Program Can be sawed haw been a TC instruchm 


SAVE 1 SCAN. COM) руды vesides on first Quae, co saw 4 Pose - 


чт SCAN. С È й . ` 
ADET SCAN. 808, Фил por wth “the Saw memayy Image dp continue Чеєбім 
{ЕК DDT VER 1.0 

NERT PC 

гав віва | 

ый, List some Code 


81860 Мут В, 08 
8102 MVI С,йй ‚ | 

8194 LXI Н, 8119 Previous Patch ic Present m X-COM 
8107 MOV AH 

8188 SUB C 

8189 C GiG 


14 


BEIM мау C.A 
#190 INK H 
MIDE DCR В 
@19Е  JNZ 0107 
B112 МОУ а: С 
-NF 
و‎ 
Р=@1@й, 
"1:0 2 "vae to See now Pochclhed veysun operates 


Date is moved from Ab C 


CazaMamEoOlO SRO GIGA МУТ E. AS 
cezamnagearo р -giüz МУІ C.G 
CozaMeEoIo I 20104 LXI H. 8118 
К@2@М@Е@1@ D =2147 МОУ A. М 
COZAMOAECIAO D=2000 201983 SUB C 
COZAMOEGOII D 21109 JC 0167 
с028М0ЕЙІ! D z818C MOV С.й 
COZAMAEATA ра0806 H=0119 2-818080 Palen INK H 
COZAMOEGII D=0000 H=@11A S-01600 P=Q10E DCR в 
COZAMAE@OTA й=@@@@ H=@11A 5-0ійй P=014F NZ alar 
COZEMBEGII ревада Н-0110 S=0100 P=0107 MOV A.M 
C@ZGMBEQ@T1 D=8@0G H=@11A <5-01й0й0 Р=0108 SUB C 
CiZAMIEOIO A=FE B=8782 D-80080 Hs01160 S=09100 P=B189 JC Gian 
CIZUMIEGIO A=FE В-0702 D=4008 H=911f S=0100 Р= 0100 INX Н 
CiZ@MiE@1@ A=FE B=07B2 D=0008 H=@11B S=0100 F=@10E DCR В 
Г120М0Е111 A=FE B=8682 D-28000 H=011B S=0100 P=@10F JNZ 08107*0107 
ES lweakpoiut aller 1b skeps— 
С1Т@М@Е111 A=FE B=0692 D=0090 H=@11B $=@1@@ P=@107 MOV A.M 
-8:198. Фил from Curvexk PC and bieakpoint at 108H 
жаї аб x 
“Ly м dah ew 
CIZUMBELII А=04 8-0602 D-89000 H=011B S=0109 Р=91@8 SUB С 
-T 

| | 
+) Siugle Step Чи a few cycles 
CIZAMOELII A=84 В=0602 D=8000 Hz011B 5=01йб P=@168 SUB C*8189 
-T 
ту 
COZEMBEGII A=02 B=0682 D=B000 H=G11B S=0100 Р=6169 JC | ВійревівС 
-X = 2 
Ly 
CAZAMBEGII As82 B=4682 D=4008 H=011B S=0100 P=014C nov С.И 
-G 
E, Rundo (әтеші 
*0116 М 
-X 
COZ1MBE111 A=83 B=8003 D-06000 H=0121 5281860 Р=0116 RST 87 


-$121, [ook ak the volue @ Liege” 


8121 03, Wong Value ! 


8125 60, ` 
0126 B2) е Command 
8127 7E o} | 

- тай 


geil? МОР 
8118 NOP 
8119 STAX B 
8118 NOP 
#118 INR В 
811C INA В 
8110 DCR В 
911Е MVI В, 01 
8120 DCR В 
“АР 

79 


Р-0116 180, Reset Ne pe 
-I, Sale Skp and welch dala Values 


COZIMBOELII A=83 B=0003 D=8090 H=@121 S=010@ P=0100 MYI 

«T 

=) 

COZIMBEIII A=03 B=0803 D-8000 H-0121 5-0100 Р=0102 MYI 

el Count set 
4 * eranl "set 

COZIMBELIL 8-03 B=G900 0=0008 H=0121 820100 Р=0104 LXI 

-T " 

=) (не ойе» 4 dala set 


COZIMBEIIi й-03 8-0800 D2s8608 Н=@119 520100 Р=8167 MOV 


76 


B.08x0102 
C.G0*0104 
Н,й119ж0107? 


A. Мжб 1 98 


-T 

=? 
С@21МВЕ111 
E" 
(920МВЕ611 
-T 

m" 
COZOMBEOTI 
-T 

-% 
COZAMBEOTA 
-I 

" 

COZOMBEOI1 


COZAMBEOI 1 
-T 
=) 
CAZUMBEGII 
-T 
ر‎ 
COZOMPEGII 


C120M1EGIO 
-T 
T 
с128М1Е010 
-L160 
— 


@19@ МУІ 
8102 MYI 
8104 LXI 
0197 MOV 
8198 SUB 
8109 JC 
Bloc МОУ 
aian INK 
ВІЗЕ DCR 
Qi@F  JNZ 
9112 МОУ 
-в1а8 
— 
#1908 CHP C 
0199; 


am hake ern broug lt bA 


A=62 В=0800 D= 8000 H=0119 S=@10@ P=Q@108 SUB Схӣій9 
üsüz В=0806 D-66800 Н-0119 S=0140 Р=@1@9 JC HIADAGIOC 
й-й2 B=0800 П-й00й H=@115 S-0100 P=B16C MOV C.A*B1QD 
pia dedo dem moved $ С covvectly 
баба B= vedi һ-й000 H=0119 $=0100 P=@10D INK H*@1i@E 
A=02 Вай802 DI=0900 H-0110 $=0100 P=@1@E DCR Ba@18F 
&=02 В-0702 Ds80080 Н=9118 528100 P=910F JNZ 9107*«201807 
й=@2 B=8782 ребайй Hs8118 5=0180 Pesala? MOY A Мат ав 
(^ Second dota dem lovouglet do A 
д=@@ В=8782 D=8000 H=011A 520180 Р=0108 SUB C*8185 
F Sublvad deslvoys dala Value which was loaded 1! 
A=FE B=0702 Ds8000 H=@11A 520188 Р«0109 JC ріаредівр 
A=FE B=@702 D=0000 Н=@11А S-8100 Р=@!00 INX H*@1BE 
В, 08 
с, ва 
A “ala 
< should have been a CMP so at rastr A 
Mee 
us would ust We destroyed. 
H 
B 
0187 
А.С 


-60, stop WT dar SWE 


1 


SAVE 1 SCAN. COM - 
MTV, Sae memory mae 


K IIT SCAN. Chia (дана DOT 
{6k UNT VER 1.0 

НЕХТ РС ` 

вара 0100 


F = 21 2 


«LI Б 


è 
8116 RST 87 
4117 


NOP 
118 NOP lock at cede to see if it was Properly Loaded 


8118 STAX B 


й118 NOP (long tuypeout Aloarted wth rubati 
7 (rubout) 

otte, Run Хурма louto completion 

#0116 , 

"ЖЕ, Look at Carry PRAS type) 

са, | 


X3 Look at Cru state 


CIZIMBELT1 A=06 B=46B6 D-88008 H-0121 5-01й060 P=0116 RST ü? 


-512 1, Look at“ Large” > it appears + le Covvect. 
#121 86, 


Ер воль HEN. Re-edit He Source Pa Yam, and woke both Changes 


*NSUE 
*aLT 
— è? 


¡LARGER VALUE IN C? 


¡LARGER VALUE IN C? 


NC NFGUND  ;JUMP IF LARGER VALUE NOT FOUND 


JC 2 NFOUND iJUMP IF LARGER VALUE NOT FOUND 
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авт SCAN. RAE" Qe-acsewlde, <42сһуң source hom. dick A 


CP/M ASSEMBLER - VER 1.8 Vex to disk A +) 
Pant to Z (selects no Put nile 

#122 ` 

002H USE FACTOR 

END OF ASSEMBLY a 


пот scan нех, {уши debugger to check Chavges 


16K DOT VER 1.6 
HEXT PC 
8121 8806 


-L116 
— ل‎ 


Bits ump aooo check Ao ensure endis chill at ЙЬН 


8119 STAX В 


8110 NOP 
#118 INR B 
7 (rubout) 


-6100, 116, (о From lea waning T" loveal ром at end 
каїіє [жаром reached 


“Diet, Look at LACE" уед ы Compacted 

8121 2 00 22 21 00 82 ТЕ EB 77 13 23 EB OB 78 Bi .."!..^.W.8..&. 
8130 C2 27 01 СЗ 03 29 80 00 ва 098 BO 29 Ва 98 BB BB .'...2.......... 
#140 08 00 BA 98 090 009 00 OO BB 99 BA BO BA BA OB BO ................ 


й (vulsout) als long Jure 
782 «рр DOT, debua Session Complete 


